Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
File: _RVIKmVgCaobyAUUg2jR69-PYsg.mft (raw, json)
Hash identifier: jnJHlVO1MMm5WmPxmiMW/fNsL54lS3WaAGnCes/k+ZI=
Subject key identifier: 77:D8:9B:D8:57:20:35:54:9C:BC:35:02:35:3D:6B:8E:B4:3E:35:C0
Authority key identifier: FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8
Certificate issuer: /CN=fd15482a656009aa1bc805148368d1ebdf8f62c8
Certificate serial: 019679EA20500AE504710A96CA1029FC453D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
Manifest number: 0F32
Signing time: Mon 28 Apr 2025 01:01:48 +0000
Manifest this update: Mon 28 Apr 2025 01:01:48 +0000
Manifest next update: Tue 29 Apr 2025 01:01:48 +0000
Files and hashes: 1: JlnlHDByaNUy0-f6Bk6pC1lv0dA.roa (hash: 3ZWBVVVlMIE03x5aR9QcVmTZqjLrQw0dyYbjGkJTjWk=)
2: _RVIKmVgCaobyAUUg2jR69-PYsg.crl (hash: 6BqVXRt09HDVlTqtg5dSoZzgJoBP/s3ps4p8wkhoi5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:ea:20:50:0a:e5:04:71:0a:96:ca:10:29:fc:45:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd15482a656009aa1bc805148368d1ebdf8f62c8
Validity
Not Before: Apr 28 01:01:48 2025 GMT
Not After : Apr 29 01:01:48 2025 GMT
Subject: CN=77d89bd8572035549cbc3502353d6b8eb43e35c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:41:d5:67:09:a5:98:02:75:e9:e8:91:a9:28:
eb:e2:28:a4:e6:3f:d7:01:20:1c:10:25:54:11:97:
b7:e7:f3:2d:fc:cc:54:39:14:62:cd:ef:67:bc:76:
42:d2:8b:e1:b1:bc:f1:b1:80:03:f9:30:f8:cc:ce:
80:e1:71:46:65:c2:1e:7c:50:66:b8:56:24:f1:4a:
8f:fa:0e:1b:11:a0:2c:7f:79:43:be:73:53:eb:8d:
96:0c:43:d1:c8:19:f1:3d:e7:bb:0d:a3:17:c2:53:
cc:c6:08:18:c4:e3:4b:b1:d8:3a:c3:21:cb:3c:ef:
d8:88:49:9a:43:b0:9f:9e:d9:ba:a3:20:f9:5f:8e:
13:f0:fc:1d:24:f2:d9:a5:da:1d:09:b0:01:0c:c1:
cc:c2:77:98:4b:f8:a2:9a:50:97:8b:9a:0d:37:9a:
d8:40:90:c1:ac:b0:63:7b:53:14:95:37:67:ef:8f:
50:a4:0c:79:60:17:a0:cc:3a:26:26:e4:61:9f:95:
a1:59:de:96:04:8e:c4:5a:48:35:ab:8b:5b:0e:d3:
a4:98:48:63:24:c5:c4:18:e7:b3:2e:74:60:42:c8:
3e:a7:d1:b4:2f:8a:de:67:0b:24:0d:90:86:5e:f9:
35:d7:15:83:e6:95:51:99:ad:5d:83:61:7e:00:d6:
12:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D8:9B:D8:57:20:35:54:9C:BC:35:02:35:3D:6B:8E:B4:3E:35:C0
X509v3 Authority Key Identifier:
keyid:FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:cb:88:e2:b5:69:fb:89:08:e2:39:63:ff:30:31:ea:85:28:
14:ac:25:b0:49:84:6d:3f:e8:05:be:46:f7:6e:f8:67:40:c1:
05:9b:61:d5:38:84:0d:cb:a9:9a:c1:67:f1:67:7a:3e:37:82:
70:b9:05:9d:f8:7d:70:fa:86:bf:49:cb:ce:7a:31:71:b5:7e:
ea:16:aa:0b:e1:96:97:d8:3b:99:dc:2a:f3:45:ed:49:55:e1:
35:48:13:39:5d:c6:1e:28:d1:96:aa:fa:6d:0c:6c:c5:a3:bb:
6a:af:47:81:de:5d:4c:ba:a3:24:25:59:a8:55:9e:da:16:2e:
ce:94:24:c1:90:3e:46:6b:aa:78:8d:5f:b6:b9:41:0b:23:7e:
a1:b0:87:c9:38:3c:d6:e8:53:27:6f:c0:75:59:37:ae:49:47:
ba:3f:7d:1d:a3:2b:70:97:57:63:20:18:5e:ea:9d:2e:39:b2:
46:f1:09:ce:58:c3:df:5b:5a:bd:0c:2c:56:c0:2b:85:46:c6:
88:b0:a3:b8:c5:2f:62:20:13:85:d6:18:2d:57:d8:d2:98:49:
75:f9:c5:9e:3e:46:8c:8e:83:52:f9:0a:c7:1a:5c:d3:3d:b3:
15:3d:b9:50:81:72:bb:4e:db:fe:3c:5f:84:0f:71:e1:4c:9f:
5b:4f:57:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ56iBQCuUEcQqWyhAp/EU9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMTU0ODJhNjU2MDA5YWExYmM4MDUxNDgzNjhkMWViZGY4
ZjYyYzgwHhcNMjUwNDI4MDEwMTQ4WhcNMjUwNDI5MDEwMTQ4WjAzMTEwLwYDVQQD
Eyg3N2Q4OWJkODU3MjAzNTU0OWNiYzM1MDIzNTNkNmI4ZWI0M2UzNWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0HVZwmlmAJ16eiRqSjr4iik5j/X
ASAcECVUEZe35/Mt/MxUORRize9nvHZC0ovhsbzxsYAD+TD4zM6A4XFGZcIefFBm
uFYk8UqP+g4bEaAsf3lDvnNT642WDEPRyBnxPee7DaMXwlPMxggYxONLsdg6wyHL
PO/YiEmaQ7Cfntm6oyD5X44T8PwdJPLZpdodCbABDMHMwneYS/iimlCXi5oNN5rY
QJDBrLBje1MUlTdn749QpAx5YBegzDomJuRhn5WhWd6WBI7EWkg1q4tbDtOkmEhj
JMXEGOezLnRgQsg+p9G0L4reZwskDZCGXvk11xWD5pVRma1dg2F+ANYSswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHfYm9hXIDVUnLw1AjU9a460PjXAMB8GA1UdIwQY
MBaAFP0VSCplYAmqG8gFFINo0evfj2LIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1JWSUttVmdDYW9ieUFVVWcyalI2OS1QWXNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jZWU5ZGItNjQwMS00NDk3LTg1ZDEt
OTE3YzgwYjE0ODYyLzEvX1JWSUttVmdDYW9ieUFVVWcyalI2OS1QWXNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9jZWU5ZGItNjQwMS00NDk3LTg1ZDEtOTE3YzgwYjE0ODYy
LzEvX1JWSUttVmdDYW9ieUFVVWcyalI2OS1QWXNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASMuI4rVp
+4kI4jlj/zAx6oUoFKwlsEmEbT/oBb5G9274Z0DBBZth1TiEDcupmsFn8Wd6PjeC
cLkFnfh9cPqGv0nLznoxcbV+6haqC+GWl9g7mdwq80XtSVXhNUgTOV3GHijRlqr6
bQxsxaO7aq9Hgd5dTLqjJCVZqFWe2hYuzpQkwZA+RmuqeI1ftrlBCyN+obCHyTg8
1uhTJ2/AdVk3rklHuj99HaMrcJdXYyAYXuqdLjmyRvEJzljD31tavQwsVsArhUbG
iLCjuMUvYiAThdYYLVfY0phJdfnFnj5GjI6DUvkKxxpc0z2zFT25UIFyu07b/jxf
hA9x4UyfW09XUA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:21:15 2025 by rpki-client